Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Portal 6/jbossweb
Red Hat
· Package
21 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
CVE-2015-5345 · GHSA-RH8Q-VJGF-GF74
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2025-08-29
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
CVE-2015-5174 · GHSA-6QR6-X7JM-X2Q6
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2025-08-29
Improper Input Validation in Apache Tomcat
CVE-2014-0227 · GHSA-42J3-498Q-M6VP
org.apache.tomcat:tomcat
Red Hat BPM Suite 6/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-12-08
Uncontrolled Resource Consumption in Apache Tomcat
CVE-2014-0230 · GHSA-PXCX-CXQ8-4MMW
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-12-07
Improper Access Control in Apache Tomcat
CVE-2014-7810 · GHSA-4C43-CWVX-9CRH
org.apache.tomcat:tomcat
Red Hat JBoss Enterprise Application Platform 6/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-12-05
Deserialization of Untrusted Data in Apache Tomcat
CVE-2013-2185 · GHSA-V6C7-8QX5-8GMP
org.apache.tomcat:tomcat
Red Hat JBoss Portal 6/jbossweb
Maven
Red Hat
High
Fix reported
2024-12-04
Apache Tomcat information exposure vulnerability
CVE-2018-1305 · GHSA-JX6H-3FJX-CGV5
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Enterprise Web Server 2/tomcat7
Maven
Red Hat
Medium
Fix reported
2024-11-29
Apache Tomcat unauthorized access vulnerability
CVE-2018-1304 · GHSA-6RXJ-58JH-436R
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Data Grid 6/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-11-29
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
CVE-2016-0706 · GHSA-6VX3-HR43-CFRH
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-03-16
High severity vulnerability that affects commons-fileupload:commons-fileupload
CVE-2016-3092 · GHSA-FVM3-CFVJ-GXQQ
commons-fileupload:commons-fileupload
Red Hat JBoss Data Grid 6/jbossweb
Maven
Red Hat
High
Fix reported
2024-03-16
Improper Handling of Exceptional Conditions in Apache Tomcat
CVE-2017-5664 · GHSA-JMVV-524F-HJ5J
org.apache.tomcat:tomcat
Red Hat JBoss Enterprise Application Platform 5/jbossweb
Maven
Red Hat
High
Fix reported
2024-03-11
Improper Verification of Source of a Communication Channel in Apache Tomcat
CVE-2016-0763 · GHSA-9HJV-9H75-XMPP
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-03-11
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
CVE-2015-5346 · GHSA-JRCP-C39H-R29X
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
High
Fix reported
2024-03-11
Improper Input Validation in Apache Tomcat
CVE-2016-6816 · GHSA-JC7P-5R39-9477
org.apache.tomcat:tomcat-coyote
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-03-11
Improper Access Control in Apache Tomcat
CVE-2016-0714 · GHSA-MV42-PX54-87JW
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
High
Fix reported
2024-03-10
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
CVE-2017-12616 · GHSA-8QQ4-8JVQ-MFW4
org.apache.tomcat:tomcat-catalina
Red Hat Enterprise Linux 6/tomcat6
Maven
Red Hat
High
Fix reported
2024-02-20
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token
CVE-2015-5351 · GHSA-W7CG-5969-678W
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
High
Fix reported
2024-02-18
Improper Authentication in Apache Tomcat
CVE-2013-2067 · GHSA-6M48-JXWX-76Q7
org.apache.tomcat:tomcat
Red Hat JBoss Enterprise Web Server 1/tomcat5
Maven
Red Hat
Medium
Fix reported
2023-11-08
Cross-Site Request Forgery in Apache Tomcat
CVE-2012-4431 · GHSA-76VR-72MV-MF3Q
org.apache.tomcat:tomcat
Red Hat JBoss Data Grid 6/jbossweb
Maven
Red Hat
Medium
Fix reported
2023-11-08
Web: jsessionid exposed via encoded url when using cookie based session tracking
CVE-2012-4529
Red Hat JBoss Portal 6/jbossweb
Red Hat
Low
No fix reported
Not recorded
Previous
1
2
Next